Jasperreports Library
Vendor:
First CVE: Nov 15, 2017 · Active for 8 years
5
Total CVEs
More Total CVEs than 79% of tracked products
1.0
Avg CVEs / Year
Bottom 1%
7.7
Avg CVSS
Higher Avg CVSS than 65% of tracked products
20.0%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Jasperreports Library over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 15, 2017
8 years ago
Most Recent CVE
Mar 15, 2022
1,596 days ago
CVE Severity & Scoring
Jasperreports Library5 CVEs
40%
60%
All CVEs353,240 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network5 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None3 (60.0%)
Unknown0 (0.0%)
Required2 (40.0%)
Privileges Required
Low4 (80.0%)
High0 (0.0%)
None1 (20.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-18809MEDIUM The default server implementation of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library Community Edition, TIBCO JasperReports Library for ActiveMatrix | Mar 7, 2019 | 6.5 | 94 | YES | YES |
CVE-2020-9410HIGH The report generator component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperRepor | May 20, 2020 | 8.8 | 30 | NO | NO |
CVE-2022-22771HIGH The Server component of TIBCO Software Inc.'s TIBCO JasperReports Library, TIBCO JasperReports Library for ActiveMatrix BPM, TIBCO JasperReports Server, TIBCO JasperReports Server | Mar 15, 2022 | 8.8 | 27 | NO | NO |
CVE-2018-5429HIGH A vulnerability in the report scripting component of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for | Apr 17, 2018 | 8.8 | 26 | NO | NO |
CVE-2017-5532MEDIUM A vulnerability in the report renderer component of TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMatrix BPM, TIBCO | Nov 15, 2017 | 5.4 | 20 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
1 CVE
20.0% of CVEs· 99th percentile
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
1 CVE
20.0% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Jasperreports Library
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.9.0 | 1 | 8.8 | 2.1% | 0 | 0 |
| 7.5.0 | 1 | 8.8 | 5.1% | 0 | 0 |
| 7.3.0 | 1 | 8.8 | 5.1% | 0 | 0 |
| 7.2.1 | 1 | 8.8 | 5.1% | 0 | 0 |
| 7.2.0 | 2 | 7.7 | 42.1% | 1 | 1 |
| 7.1.0 | 1 | 6.5 | 79.1% | 1 | 1 |
| 6.4.2 | 1 | 8.8 | 1.6% | 0 | 0 |
| 6.4.1 | 2 | 7.1 | 1.1% | 0 | 0 |
| 6.4.0 | 2 | 7.1 | 1.1% | 0 | 0 |
| 6.3.3 | 1 | 8.8 | 1.6% | 0 | 0 |
| 6.3.2 | 2 | 7.1 | 1.1% | 0 | 0 |
| 6.3.1 | 1 | 5.4 | 0.7% | 0 | 0 |
| 6.3.0 | 2 | 7.1 | 1.1% | 0 | 0 |